← Back to Feed
Analysis of a Phishing Email Attack Case by the Larva-24009 Threat Actor
August 2, 2026 · AhnLab ASEC · Severity: HIGH
The Larva-24009 threat actor has been conducting phishing email attacks since at least 2023 to install malware. These attacks target users in Korea and globally.
Key Takeaways
- Larva-24009 has been active since at least 2023 targeting users globally.
- The threat actor uses phishing emails to install malware on victims' systems.
- Attacks target both Korean and international users for malware distribution.